last executing test programs:

3m23.417024667s ago: executing program 0 (id=747):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0)
syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3m21.867291011s ago: executing program 0 (id=764):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xd82, &(0x7f0000001c00)={@random="bbc5f3bdc430", @empty, @void, {@ipv4={0x3000, @udp={{0x5, 0x4, 0x0, 0x0, 0xd74, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd60, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)

3m21.722505951s ago: executing program 0 (id=766):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000240)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@bh}, {@dioread_nolock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f000001c2c0)="$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")

3m21.478041799s ago: executing program 0 (id=767):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

3m21.268787413s ago: executing program 0 (id=768):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$inet(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100ffffffff"})

3m20.592519487s ago: executing program 0 (id=783):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001002cbd7000fcdbdf25040000000600040052000000060003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x240400c0)

3m20.4103062s ago: executing program 32 (id=783):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001002cbd7000fcdbdf25040000000600040052000000060003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x240400c0)

1m11.757261959s ago: executing program 2 (id=2315):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000140)={[{@fat=@sys_immutable}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@numtail}]}, 0x3, 0x356, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

1m11.467325417s ago: executing program 2 (id=2320):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

1m11.364316704s ago: executing program 2 (id=2321):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m11.185209482s ago: executing program 2 (id=2322):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

1m10.996762134s ago: executing program 2 (id=2323):
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0xb403dc3ee651df83)

1m9.372459492s ago: executing program 2 (id=2333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050c3000180ffffffffffff0d004a190006"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m9.15948788s ago: executing program 33 (id=2333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050c3000180ffffffffffff0d004a190006"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.71144528s ago: executing program 3 (id=3238):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4000040)

2.71115738s ago: executing program 3 (id=3239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000000400140003006e657464657673696d30000000000000080004000d040000a8001680840001800c0003"], 0xe4}}, 0x800)

2.642728554s ago: executing program 3 (id=3240):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000a40))

1.402348216s ago: executing program 4 (id=3256):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327a", @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.322459222s ago: executing program 4 (id=3259):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0x0, 0x4, 0xc, 0x8, 0xc, 0x8, 0xf, 0x7, 0x9, 0x0, 0x3, 0xa, 0x3, 0x6, 0xc, 0x3], 0x1, [0x7f, 0x2, 0x0, 0xffff, 0x7fff, 0x3, 0xfb, 0xd, 0xb43, 0x2bf2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x5], [0xffff, 0x200, 0x9, 0x101, 0x6, 0x6, 0x4, 0x9, 0x5, 0xbb, 0x7, 0x7, 0x9, 0x2, 0xb2ac, 0x376]}}}}]}, 0x88}}, 0x0)

1.257432426s ago: executing program 4 (id=3261):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x3, 0x2000024, 0x9, 0x18, 0x800b, 0x8000c0, 0x9, 0x10e, 0xffffffffffffffff})

1.253221245s ago: executing program 4 (id=3262):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x804048, &(0x7f0000000240)=ANY=[], 0x1, 0x22f, &(0x7f0000000500)="$eJzsVT9v00AU/73zxU4gSJ07VSKiXaCpKyHGbv0CfACs1JSoDn/qSDRRpASWLrDwJSoxMzExIMHOgBCIpR1AYiliKkJBd/fOscE0Nmo3/6Tk/e79veez392JH8QegF/How4WoEFo4iMRJIBlMroT18jvLKeML9Ks11j/nOURy3gwfPfE0OFOEEXhbjyYQ4iAeT4Rl4WVwebLlJPMKWY956Z++zirIeQ6CwCF+jkTIkC205mp7xjV31HjjMbD8JMxTZ0gahgTx+LfRb3Tn9ilrGn0omA7DU77p0nMfASYLJV4b0ynhvxoZh5U9DU3inbG/3soNZz3uQOaqMP92TztmAz58Cz/qWricHgj+/6UIIRizk+zmoEhPAxKHeVR7ostCoW7XCu2X028+ch+Qe+PRx3FbgHY4H1tmZ/9JLSPWrzmSad0ixKYAORgStZHAhtqsQxgtd+7vxoPhle7vWA73A7v+v769fabi/yJTsdANwrbtVQJYSfYIhJcSNmV72eZTLkJUqDU1jiOXJi92VFnh/PKZSN1fw1ApGLTOUzeV0l7dgA46OEmrqAO4OGElgCfs7WgsjmzYAcSt7tRuCZT+4Q4gUBdG6517kVb+yAQe7YPICFs2CFqycKHWaj04fqNpP19li39X0+2fsDykKW9u+ydJHWGb7xamQAu9oJ+f1dfXoYlOt+VwJ6n2EJSWXBVexvamdzyUBxUwrdChQoVKlSoUOHM8TsAAP//JnIjDg==")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1.192584928s ago: executing program 1 (id=3263):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x26, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c2b3f90547406b18901b0aeff04c0300f3c75dc2d227a83b89483b30847434755e1545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b30325"}, {0x21, 0x7, "b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

1.126827323s ago: executing program 1 (id=3264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)

1.126505634s ago: executing program 4 (id=3265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x40)

1.122189834s ago: executing program 1 (id=3266):
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)

1.088359543s ago: executing program 4 (id=3267):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "88ae48f15d33f9ab", "c0e5dec400230e0635026c93a5a93656", "a7be1c81", "ae1bd0816dba5728"}, 0x28)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x2000084c)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])

1.02162786s ago: executing program 1 (id=3268):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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")
r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

70.98845ms ago: executing program 3 (id=3269):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90)
stat(0x0, 0x0)

70.865359ms ago: executing program 1 (id=3270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x53)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

616.42µs ago: executing program 1 (id=3271):
syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})

372.946µs ago: executing program 3 (id=3272):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$eJzslb9uE0EQxn97t/HFYKTUVJGwSBqI7UiIMl1egAfAco5g5cwfnyWwZcmGJg00vEQkaioqCiToKRAC0SQFSDRBVEHI6G5nz3dgOzYK3X2SPd/OfjO7e7uzezu8H3rAr+N+gxViKEp8VAoNrCnjOykY+13sSPBFm3ZV/M/FHokNu713Twzt7dWDwG+H3WnEIyZKwVSNJTIs1ta3X6ZEesJgVnlq6rePsx7FRLEDzF7PWRIHZVc67uq4xvV31CDj8eh9GmuKhpjYItMH9WZ/sQvZrv6LOZdTlLR/djljjYOQ1XnOTWalhvwoZT5U8HVilNob/OumLPG/9x1iEm3uzxIztsmQD88mf9WYuBJelPMT7exi81HMJ36a9XQNkctgoa08mniwx4fE4/Q8oa2acPuRraD3x/1GxG4CWzKvHfOTcjKaqPFabrrId1HDEJTLSFmNhq2osQZsdFr3NsJu70qzVd/1d/07tdrmtcqb81KiowE0A7+ylBoiKeohCc6l+iPtZ510pVTEkXZqEqcKmLlpJQKJXb9krGsqHicVm85h8r5KlmcvAJcWN7jMMvBgqFahJtnKRNnccbCL5lYz8Ks6NU84wWE57rjauBvs7KNQoqwcoHFs2CFLSaOGaUTp/c3ryfL3xZbj/+Vk6gdiD8Xat8u+STrO8E1a60Mo8LDe6bTt40W7mvhqBY2wlWRkR0a1r6G9k8se80MtoM2RI0eOHDly5Dhz/A4AAP//Z98fTg==")
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4200, 0xe3)

0s ago: executing program 3 (id=3273):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x210cc1, &(0x7f0000006840)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4", @ANYRES8], 0x1, 0x4431, &(0x7f00000088c0)="$eJzs3c9PHGUfAPBnBvoW+raV1h5qYuImNtGoIdCTShMppaXQYk21PXjZLrAt6MI2sBgPPeCtiScTD8ZDo4k3Tg2J5/onePFYz0000YuJSSNmd2cpM+yGFVmwzedz2GGe3/CdefaZw/DEicrs3FJubilXWMiVp28unc59Ui4tzxdDvEea9n9g7/qnPZ24Tiqzv623avP7XRs5zVw5d+H966dD+GHmp0fr6+vroao7NDW46ec/fr8zvfnYEGfqVNtt3tpu+TCEcGLLuKq6Qgg9IYQohHA2SRtJjr0hhCNJ3vU7n9/I7dJo7j8snsk/nry7NnRqYvXeWuvfPQrh69ILb9ya/+XlrqGfX9ul7gEAAAAAAAAAAAAAAAAAeMqNXb1y7b2BwfAgCt2r0db3dceSY6v3Y9d3zUud/2UBAAAAAAAAAAAAAAAAAADgP+rJ+/+56HiT9/9Hk+Nwi/rr73R+jHTO+LtXRs8PDCb7v0db8t9Mkn492xWONdn3Pbv/+9lM/eb7v2/tZ6ca42v02xeiuD91Hsf9/SF8m2z8fjI6FJfKS5XXb5aXF2Z2bRhPrXT867v3p6KTbOjfZvzjkUz7nd////ktV1P1/MbuXWLPtHT8u1qW++6zqK37/1ym3l7En51Lx7+7lta7ucBwfQKoxv+L7u3jP5ppv1PxPxpCyEXVseZSM0B1DVNNb7VeIS0d/wO1tNTUmfwhW93/f2bifz7T/n7N/yvZLyKaSsf/f7W0nlSJg7XPWvzj7e//C5n29yP+1fGv+P5vSzr+9ViH7lSR2l+y3fl/LNN+y/gf/HfjvhYn4zwapa6A1aie3ur/1ZGWjn/Plvwnz39xW+u/i5n6e/X81+i38fzXmP5fjerPfzSXjn9vy3Lt3v/jmXqdnv+Ha+s/diod/0O1tPTaua/22W78JzLtdyr+taeSnkb8n8wnfx2sp39j/deWdPz/X0+MN5dYqX3W1n/R9uv/S5n292P9Vx3/StzZXp8V6fgfblmuGv8f2/j+v5yp1/n4hzBgrb9j6fgfaVmudv/3bB//yUy9Tsf/lU42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAUGEmOfSGK+1PncdzfH8K55PxkOBRNFWbyU6Xy9MdLIYwm6blwPLpVKk8VSvm5hfJMMV8olcrTIZxP8k+EnmipVK7k5wu3L2y01RvNFguLlalioRJCGEvSXwxHGm1NzVXmC7dDCBc38p6Ly4u3ZwsL+Zm5xbcHBgYGwvjGGI5FxU8rxYVKvfd6bggTG3X7ok2Dq2Vf2hjL4eij8vLiQqFUS7+8qU6pPF0obaozmeR9GY5FlcXlhelCpZgvlW81+ttPw8lxdPzqB1cvD27JvxHVjyN7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qEHQ299FULorp/FIYThxg9Rs/L3HxbP5B9P3l0bOjWxem/tUatyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY9QEgigMwG8mRZIux0i1JF3aDYGQFNkgeAI9hofRo3gJ72BhYWshguyirruwjVbf1zyYn5n3YB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDM96ga/7+9R6R42j9GLKer9Xn+W9f5Z/f9hzvMyO38/FVfpz9MV/lHfbQp8zHdbWeT6KiNRWtP2vt02ee5d66+feubr+n7EikXEVHW+WvKuSiGvQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//9m1RxX")
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000022, &(0x7f0000000340)='heartbeat=none')

kernel console output (not intermixed with test programs):

000
[  208.005433][ T9811]   Durability:   
[  208.005592][ T9811] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  208.057235][    C1] vkms_vblank_simulate: vblank timer overrun
[  208.746853][ T5912] lenovo 0003:17EF:60EE.0005: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[  208.771273][ T5912] lenovo 0003:17EF:60EE.0005: Failed to switch middle button: -71
[  208.870510][ T5912] lenovo 0003:17EF:60EE.0005: Fn-lock setting failed: -71
[  208.875289][ T5912] lenovo 0003:17EF:60EE.0005: Sensitivity setting failed: -71
[  208.891626][ T5912] usb 4-1: USB disconnect, device number 9
[  209.298805][ T9847] overlayfs: failed to clone upperpath
[  209.793951][ T9856] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1581'.
[  209.952911][ T9867] overlayfs: failed to clone upperpath
[  210.949856][ T9946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1602'.
[  210.952841][ T9946] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1602'.
[  210.955600][ T9946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1602'.
[  211.306458][ T9981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.365627][ T9983] loop2: detected capacity change from 0 to 512
[  211.429307][ T9983] EXT4-fs (loop2): 1 orphan inode deleted
[  211.433500][ T9983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.438245][ T9983] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.445213][ T2966] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  211.449202][ T2966] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:4: Failed to release dquot type 1
[  211.486784][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.853677][T10002] loop3: detected capacity change from 0 to 32768
[  212.870483][T10002] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1619 (10002)
[  212.890450][T10002] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  214.559375][T10058] loop3: detected capacity change from 0 to 2048
[  214.609189][T10058] loop3: detected capacity change from 0 to 1764
[  214.614688][T10055] loop2: detected capacity change from 0 to 32768
[  214.655079][ T5847]  loop2: p9 p11 p16
[  214.666032][T10058] iso9660: Corrupted directory entry in block 2 of inode 1920
[  214.687102][T10058] iso9660: Corrupted directory entry in block 2 of inode 1920
[  214.774227][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[  214.778352][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[  214.817888][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[  214.864407][T10064] loop2: detected capacity change from 0 to 512
[  214.891090][T10064] FAT-fs (loop2): Directory bread(block 900) failed
[  214.898562][T10064] FAT-fs (loop2): Directory bread(block 901) failed
[  214.901259][T10064] FAT-fs (loop2): Directory bread(block 902) failed
[  214.923024][T10064] FAT-fs (loop2): Directory bread(block 903) failed
[  214.925496][T10064] FAT-fs (loop2): Directory bread(block 904) failed
[  214.927924][T10064] FAT-fs (loop2): Directory bread(block 905) failed
[  214.930747][T10064] FAT-fs (loop2): Directory bread(block 906) failed
[  214.948429][T10064] FAT-fs (loop2): Directory bread(block 907) failed
[  214.986348][T10064] FAT-fs (loop2): FAT read failed (blocknr 128)
[  215.255491][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'.
[  215.517936][T10094] loop3: detected capacity change from 0 to 2048
[  216.031205][ T1091] Bluetooth: hci3: Frame reassembly failed (-84)
[  216.038281][T10105] tmpfs: Bad value for 'mpol'
[  216.162617][T10110] loop3: detected capacity change from 0 to 4096
[  216.271759][ T5235] Bluetooth: unknown link type 97
[  216.273514][ T5235] Bluetooth: hci0: connection err: -111
[  216.531844][  T123] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  216.687090][  T123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.691189][  T123] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  216.695063][  T123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.704592][  T123] usb 4-1: config 0 descriptor??
[  216.879578][T10120] netlink: 'syz.1.1664': attribute type 5 has an invalid length.
[  216.928924][   T33] audit: type=1326 audit(1755567970.861:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.938061][   T33] audit: type=1326 audit(1755567970.871:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.950716][   T33] audit: type=1326 audit(1755567970.871:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.962250][   T33] audit: type=1326 audit(1755567970.871:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.971143][   T33] audit: type=1326 audit(1755567970.871:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.978895][   T33] audit: type=1326 audit(1755567970.881:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.988316][   T33] audit: type=1326 audit(1755567970.881:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  216.997197][   T33] audit: type=1326 audit(1755567970.881:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  217.005919][   T33] audit: type=1326 audit(1755567970.891:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  217.014680][   T33] audit: type=1326 audit(1755567970.891:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  217.116949][  T123] waltop 0003:172F:0501.0006: item fetching failed at offset 5/7
[  217.120509][  T123] waltop 0003:172F:0501.0006: probe with driver waltop failed with error -22
[  217.326056][   T24] usb 4-1: USB disconnect, device number 10
[  217.378218][T10137] overlayfs: failed to clone upperpath
[  218.061724][ T5235] Bluetooth: hci3: command 0x1003 tx timeout
[  218.067112][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  218.275754][T10158] loop3: detected capacity change from 0 to 32768
[  218.516721][T10173] loop3: detected capacity change from 0 to 128
[  218.731830][T10172] loop2: detected capacity change from 0 to 32768
[  218.744445][T10172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1687 (10172)
[  218.773719][T10172] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.777729][T10172] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  218.781204][T10172] BTRFS info (device loop2): using free-space-tree
[  218.796087][T10173] loop3: detected capacity change from 0 to 32768
[  218.806855][T10173] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 59fb7afa-edb8-472e-905f-86b7f5b68a93
[  218.816081][T10173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1688 (10173)
[  218.824189][T10173] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  218.963695][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.958548][T10221] loop2: detected capacity change from 0 to 32768
[  220.489724][T10252] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  220.800758][T10261] can0: slcan on ptm0.
[  220.913738][T10260] can0 (unregistered): slcan off ptm0.
[  220.948820][T10270] kAFS: unable to lookup cell '.,'
[  221.424485][T10299] netlink: 'syz.3.1736': attribute type 6 has an invalid length.
[  221.432801][T10299] netlink: 'syz.3.1736': attribute type 6 has an invalid length.
[  221.716622][T10319] syz_tun: entered promiscuous mode
[  221.719419][T10319] vlan2: entered promiscuous mode
[  221.918411][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'.
[  222.341695][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  222.502422][   T24] usb 3-1: Using ep0 maxpacket: 8
[  222.509878][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  222.515810][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  222.519999][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  222.526064][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  222.533434][   T24] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  222.536882][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.539688][   T24] usb 3-1: Product: syz
[  222.540965][   T24] usb 3-1: Manufacturer: syz
[  222.543743][   T24] usb 3-1: SerialNumber: syz
[  222.548570][   T24] usb 3-1: config 0 descriptor??
[  222.565936][   T24] powermate 3-1:0.0: probe with driver powermate failed with error -5
[  222.745757][T10350] loop3: detected capacity change from 0 to 8192
[  222.770818][  T123] usb 3-1: USB disconnect, device number 18
[  223.108304][T10367] loop3: detected capacity change from 0 to 1024
[  223.207856][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'.
[  223.312057][T10377] IPVS: Unknown mcast interface: ip6erspan0
[  223.502504][T10391] loop3: detected capacity change from 0 to 4096
[  223.754093][T10402] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  224.689655][T10430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  224.738815][T10437] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1801'.
[  224.779461][T10436] binder: 10431:10436 ioctl c0306201 0 returned -14
[  225.661702][ T5235] Bluetooth: hci0: command tx timeout
[  225.938472][T10452] loop3: detected capacity change from 0 to 32768
[  226.057352][T10460] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  226.191417][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1817'.
[  226.335431][T10484] loop2: detected capacity change from 0 to 8
[  226.345462][T10484] SQUASHFS error: lzo decompression failed, data probably corrupt
[  226.350298][T10484] SQUASHFS error: Failed to read block 0x28d: -5
[  226.354219][T10484] SQUASHFS error: Unable to read metadata cache entry [28b]
[  226.357718][T10484] SQUASHFS error: Unable to read inode 0x11f
[  226.491973][  T123] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  226.641671][  T123] usb 4-1: Using ep0 maxpacket: 32
[  226.658842][  T123] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.663106][  T123] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  226.666524][  T123] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  226.678020][  T123] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  226.686418][  T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.689551][  T123] usb 4-1: Product: syz
[  226.691233][  T123] usb 4-1: Manufacturer: syz
[  226.694879][T10502] netlink: 'syz.1.1830': attribute type 10 has an invalid length.
[  226.698110][  T123] usb 4-1: SerialNumber: syz
[  226.701253][T10502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1830'.
[  226.704492][  T123] cdc_ncm 4-1:1.0: skipping garbage
[  226.721008][  T123] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  226.724230][  T123] cdc_ncm 4-1:1.0: bind() failure
[  226.724600][T10503] loop2: detected capacity change from 0 to 2048
[  226.754267][T10504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.882983][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1833'.
[  226.912393][  T123] usb 4-1: USB disconnect, device number 11
[  226.922621][T10512] fuse: blksize only supported for fuseblk
[  226.996993][T10518] fuse: Bad value for 'fd'
[  227.261019][T10528] overlayfs: failed to clone upperpath
[  227.335782][T10524] loop2: detected capacity change from 0 to 32768
[  227.340896][T10524] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1840 (10524)
[  227.349569][T10524] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  227.361327][T10524] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  227.365627][T10524] BTRFS info (device loop2): using free-space-tree
[  227.479715][T10547] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1844'.
[  227.593298][ T5851] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  227.758535][ T5235] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  227.762399][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  227.762420][ T5235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.762431][ T5235] Workqueue: hci2 hci_rx_work
[  227.762454][ T5235] Call Trace:
[  227.762461][ T5235]  <TASK>
[  227.762468][ T5235]  dump_stack_lvl+0x189/0x250
[  227.762493][ T5235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.762511][ T5235]  ? __pfx__printk+0x10/0x10
[  227.762537][ T5235]  ? kernfs_path_from_node+0x250/0x290
[  227.762553][ T5235]  ? kernfs_path_from_node+0x2f/0x290
[  227.762573][ T5235]  sysfs_create_dir_ns+0x259/0x280
[  227.762591][ T5235]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  227.762609][ T5235]  ? do_raw_spin_unlock+0x4d/0x240
[  227.762632][ T5235]  kobject_add_internal+0x59f/0xb40
[  227.762661][ T5235]  kobject_add+0x155/0x220
[  227.762686][ T5235]  ? __pfx_kobject_add+0x10/0x10
[  227.762708][ T5235]  ? _raw_spin_unlock+0x28/0x50
[  227.762729][ T5235]  ? get_device_parent+0x366/0x3a0
[  227.762747][ T5235]  device_add+0x408/0xb50
[  227.762766][ T5235]  hci_conn_add_sysfs+0xd5/0x1e0
[  227.762785][ T5235]  le_conn_complete_evt+0xc3a/0x1220
[  227.762817][ T5235]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  227.762868][ T5235]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  227.762895][ T5235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.762914][ T5235]  ? skb_pull_data+0xfb/0x200
[  227.762935][ T5235]  hci_le_enh_conn_complete_evt+0x189/0x470
[  227.762956][ T5235]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  227.762980][ T5235]  hci_event_packet+0x78f/0x1200
[  227.763000][ T5235]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  227.763020][ T5235]  ? __pfx_hci_event_packet+0x10/0x10
[  227.763038][ T5235]  ? kcov_remote_start+0x4d3/0x7f0
[  227.763058][ T5235]  ? lockdep_hardirqs_on+0x90/0x150
[  227.763079][ T5235]  ? hci_send_to_monitor+0xe2/0x570
[  227.763101][ T5235]  hci_rx_work+0x46a/0xe80
[  227.763123][ T5235]  ? process_scheduled_works+0x9ef/0x17b0
[  227.763139][ T5235]  process_scheduled_works+0xae1/0x17b0
[  227.763178][ T5235]  ? __pfx_process_scheduled_works+0x10/0x10
[  227.763214][ T5235]  worker_thread+0x8a0/0xda0
[  227.763231][ T5235]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.763255][ T5235]  ? __kthread_parkme+0x7b/0x200
[  227.763276][ T5235]  kthread+0x711/0x8a0
[  227.763296][ T5235]  ? __pfx_worker_thread+0x10/0x10
[  227.763312][ T5235]  ? __pfx_kthread+0x10/0x10
[  227.763331][ T5235]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.763349][ T5235]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.763366][ T5235]  ? __pfx_kthread+0x10/0x10
[  227.763386][ T5235]  ret_from_fork+0x3fc/0x770
[  227.763404][ T5235]  ? __pfx_ret_from_fork+0x10/0x10
[  227.763424][ T5235]  ? __switch_to_asm+0x39/0x70
[  227.763443][ T5235]  ? __switch_to_asm+0x33/0x70
[  227.763460][ T5235]  ? __pfx_kthread+0x10/0x10
[  227.763479][ T5235]  ret_from_fork_asm+0x1a/0x30
[  227.763512][ T5235]  </TASK>
[  227.763540][ T5235] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  227.883105][ T5235] Bluetooth: hci2: failed to register connection device
[  228.088062][T10551] loop3: detected capacity change from 0 to 32768
[  228.103275][T10551] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  228.733338][T10575] loop2: detected capacity change from 0 to 32768
[  228.737916][T10575] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  228.737916][T10575] clean (size 2912):
[  228.737916][T10575] flags:          0
[  228.737916][T10575] journal_seq:    13
[  228.737916][T10575] usage: type=inodes v=8
[  228.737916][T10575] usage: type=key_version v=2
[  228.737916][T10575] usage: type=reserved v=0
[  228.737916][T10575] usage: type=reserved v=0
[  228.737916][T10575] usage: type=reserved v=0
[  228.737916][T10575] usage: type=reserved v=0
[  228.737916][T10575] data_usage: btree: 1/1 [0]=2816
[  228.737916][T10575] data_usage: journal: 1/1 [0]=0
[  228.737916][T10575] data_usage: user: 1/1 [0]=16
[  228.737916][T10575] datetime: 0
[  228.737916][T10575] clock: read=0
[  228.737916][T10575] clock: write=1280
[  228.737916][T10575] dev_usage: dev=1179915  
[  228.737916][T10575] 
[  228.774781][T10575] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  228.957176][T10579] loop2: detected capacity change from 0 to 64
[  229.132138][T10584] loop3: detected capacity change from 0 to 512
[  229.639134][T10593] nfs4: Unexpected value for 'acl'
[  229.966513][T10595] loop3: detected capacity change from 0 to 40427
[  231.420079][T10638] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1883'.
[  231.544100][T10634] loop2: detected capacity change from 0 to 32768
[  231.576491][T10644] loop3: detected capacity change from 0 to 4096
[  231.589648][   T33] kauditd_printk_skb: 46 callbacks suppressed
[  231.589658][   T33] audit: type=1800 audit(1755568241.514:100): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1886" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  232.602780][T10669] loop2: detected capacity change from 0 to 512
[  232.606358][T10669] EXT4-fs: Ignoring removed nobh option
[  232.639632][T10669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.644782][T10669] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  232.726460][T10669] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.1896: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  232.740577][T10669] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.1896: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  233.115220][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.527752][T10695] overlayfs: failed to clone upperpath
[  233.549696][T10693] ref_ctr_offset mismatch. inode: 0x69c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  233.808606][T10709] loop3: detected capacity change from 0 to 512
[  233.908718][T10711] loop2: detected capacity change from 0 to 4096
[  233.931443][T10711] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  233.964180][T10711] ntfs3(loop2): ino=1a, mi_enum_attr
[  233.965932][T10711] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  233.968355][T10711] ntfs3(loop2): ino=1a, mi_enum_attr
[  233.970023][T10711] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  234.146488][T10713] loop3: detected capacity change from 0 to 32768
[  234.172470][T10713] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1915 (10713)
[  234.176787][T10713] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  234.296606][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  234.521800][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  234.546502][ T5912] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  234.562140][ T5912] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  234.572486][ T5912] usb 3-1: Product: syz
[  234.576992][ T5912] usb 3-1: Manufacturer: syz
[  234.579651][ T5912] usb 3-1: SerialNumber: syz
[  234.588454][ T5912] usb 3-1: config 0 descriptor??
[  234.733523][T10730] hugetlbfs: syz.3.1921 (10730): Using mlock ulimits for SHM_HUGETLB is obsolete
[  234.837464][ T5912] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  234.841841][ T5912] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  234.908162][T10734] Illegal XDP return value 2868420397 on prog  (id 156) dev syz_tun, expect packet loss!
[  234.944182][ T5912] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  234.959977][ T5912] usb 3-1: USB disconnect, device number 19
[  235.148981][T10738] ip6gretap1: entered promiscuous mode
[  235.151419][T10738] ip6gretap1: entered allmulticast mode
[  235.183480][T10740] CIFS: VFS: Malformed UNC in devname
[  235.433739][T10755] loop3: detected capacity change from 0 to 8
[  235.568006][T10762] loop2: detected capacity change from 0 to 1024
[  235.583019][T10762] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  235.609335][T10762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.651339][T10762] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1936: missing EA_INODE flag
[  235.667431][T10762] EXT4-fs (loop2): Remounting filesystem read-only
[  235.707189][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.726841][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'.
[  235.907931][   T33] audit: type=1326 audit(1755568245.834:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10775 comm="syz.1.1943" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4b0d8ebe9 code=0x0
[  236.098997][T10785] loop2: detected capacity change from 0 to 4096
[  236.104207][T10785] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  236.164498][   T33] audit: type=1800 audit(1755568246.094:102): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1944" name="file1" dev="loop2" ino=33 res=0 errno=0
[  236.278592][   T47] kernel write not supported for file /vcsa (pid: 47 comm: kworker/1:1)
[  236.368805][T10800] loop3: detected capacity change from 0 to 2048
[  236.562245][   T47] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  236.723578][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.727775][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.731391][   T47] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  236.735072][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.741479][   T47] usb 3-1: config 0 descriptor??
[  237.159605][   T47] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  237.350531][   T47] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00
[  237.638840][T10822] loop3: detected capacity change from 0 to 256
[  237.794647][   T47] cp2112 0003:10C4:EA90.0007: error setting SMBus config
[  237.807023][   T47] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71
[  237.823343][   T47] usb 3-1: USB disconnect, device number 20
[  238.295101][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1965'.
[  239.041912][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  239.195529][ T5912] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[  239.200216][ T5912] usb 4-1: config 0 has no interface number 0
[  239.204449][ T5912] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  239.207910][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.221963][ T5912] usb 4-1: config 0 descriptor??
[  239.788133][ T5912] usb 4-1: string descriptor 0 read error: -71
[  239.795082][ T5912] usb-storage 4-1:0.168: USB Mass Storage device detected
[  239.810430][ T5912] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  239.877454][ T5912] usb 4-1: USB disconnect, device number 12
[  239.946234][T10883] loop2: detected capacity change from 0 to 4096
[  239.951242][T10883] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  241.027344][T10913] loop2: detected capacity change from 0 to 32768
[  241.030251][   T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  241.034115][T10913] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2003 (10913)
[  241.135109][T10913] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  241.139030][T10913] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  241.142823][T10913] BTRFS info (device loop2): using free-space-tree
[  241.214525][   T47] usb 4-1: Using ep0 maxpacket: 32
[  241.226263][   T47] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  241.238163][   T47] usb 4-1: config 0 has no interface number 0
[  241.245004][   T47] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  241.249225][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.262061][   T47] usb 4-1: Product: syz
[  241.268001][   T47] usb 4-1: Manufacturer: syz
[  241.269875][   T47] usb 4-1: SerialNumber: syz
[  241.302538][   T47] usb 4-1: config 0 descriptor??
[  241.318380][   T47] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  241.322656][   T33] audit: type=1800 audit(1755568251.244:103): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2003" name="file2" dev="loop2" ino=261 res=0 errno=0
[  241.404552][T10939] netlink: 'syz.1.2008': attribute type 14 has an invalid length.
[  241.436810][ T5851] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  241.525438][   T47] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  241.549163][   T47] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  241.922696][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  241.926732][   T47] usb 4-1: USB disconnect, device number 13
[  241.950218][   T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  241.970329][   T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  241.982557][   T47] quatech2 4-1:0.51: device disconnected
[  242.053720][T10950] 8021q: adding VLAN 0 to HW filter on device bond3
[  242.141263][T10944] loop2: detected capacity change from 0 to 32768
[  242.163816][T10944] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.213413][T10944] XFS (loop2): Ending clean mount
[  242.268637][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.519588][T10968] loop2: detected capacity change from 0 to 128
[  242.727924][   T33] audit: type=1800 audit(1755568252.654:104): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2017" name="file1" dev="loop2" ino=1048632 res=0 errno=0
[  242.977045][T10983] loop3: detected capacity change from 0 to 40427
[  243.447865][T10998] loop2: detected capacity change from 0 to 256
[  243.469617][T10998] FAT-fs (loop2): Directory bread(block 64) failed
[  243.475022][T10998] FAT-fs (loop2): Directory bread(block 65) failed
[  243.478242][T10998] FAT-fs (loop2): Directory bread(block 66) failed
[  243.481374][T10998] FAT-fs (loop2): Directory bread(block 67) failed
[  243.484510][T10998] FAT-fs (loop2): Directory bread(block 68) failed
[  243.491219][T10998] FAT-fs (loop2): Directory bread(block 69) failed
[  243.494901][T10998] FAT-fs (loop2): Directory bread(block 70) failed
[  243.498498][T10998] FAT-fs (loop2): Directory bread(block 71) failed
[  243.505522][T10998] FAT-fs (loop2): Directory bread(block 72) failed
[  243.513371][T10998] FAT-fs (loop2): Directory bread(block 73) failed
[  243.987265][T11003] Device name cannot be null; rc = [-22]
[  244.268523][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  244.519532][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'.
[  244.526879][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'.
[  244.530013][T11029] netlink: 'syz.2.2044': attribute type 6 has an invalid length.
[  244.664485][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'.
[  244.669843][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'.
[  244.703252][T11035] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2047'.
[  244.738402][T11038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.251874][   T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  245.404887][   T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  245.408118][   T47] usb 4-1: config 0 has no interface number 0
[  245.413050][   T47] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  245.416021][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.418640][   T47] usb 4-1: Product: syz
[  245.420492][   T47] usb 4-1: Manufacturer: syz
[  245.423210][   T47] usb 4-1: SerialNumber: syz
[  245.428133][   T47] usb 4-1: config 0 descriptor??
[  245.506631][T11065] netlink: 'syz.1.2061': attribute type 21 has an invalid length.
[  245.509300][T11065] IPv6: NLM_F_CREATE should be specified when creating new route
[  245.696800][   T47] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  245.720227][   T47] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  245.727412][   T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  245.732307][   T47] usb 4-1: media controller created
[  245.745267][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.869669][   T47] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  245.897349][   T47] usb 4-1: USB disconnect, device number 14
[  246.001673][   T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  246.156509][   T10] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  246.160300][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.164841][   T10] usb 3-1: Product: syz
[  246.166716][   T10] usb 3-1: Manufacturer: syz
[  246.168241][   T10] usb 3-1: SerialNumber: syz
[  246.173142][   T10] usb 3-1: config 0 descriptor??
[  246.381423][   T47] usb 3-1: USB disconnect, device number 21
[  246.994717][T11103] loop2: detected capacity change from 0 to 512
[  246.999306][T11103] EXT4-fs (loop2): Test dummy encryption mode enabled
[  247.004756][T11103] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  247.008763][T11103] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  247.015090][T11103] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[  247.041631][T11103] loop2: detected capacity change from 0 to 512
[  247.057277][T11103] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2079: bad orphan inode 15
[  247.070270][T11103] ext4_test_bit(bit=14, block=5) = 0
[  247.080954][T11103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.133226][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.313525][T11111] netlink: 'syz.2.2082': attribute type 13 has an invalid length.
[  247.368766][T11111] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.378469][T11111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.731853][   T47] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  247.820874][T11131] fuse: Bad value for 'fd'
[  247.897023][   T47] usb 3-1: Using ep0 maxpacket: 16
[  247.901750][   T47] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  247.904710][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.908300][   T47] usb 3-1: config 0 has no interface number 0
[  247.911068][T11135] tmpfs: Group quota block hardlimit too large.
[  247.916943][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  247.920178][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.931633][   T47] usb 3-1: Product: syz
[  247.933108][   T47] usb 3-1: Manufacturer: syz
[  247.934784][   T47] usb 3-1: SerialNumber: syz
[  247.938304][   T47] usb 3-1: config 0 descriptor??
[  247.943287][   T47] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  247.945856][   T47] usb 3-1: No valid video chain found.
[  248.053620][ T5854] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  248.148677][   T10] usb 3-1: USB disconnect, device number 22
[  248.233034][ T5854] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  248.236635][ T5854] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  248.243121][ T5854] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  248.245783][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.248197][ T5854] usb 4-1: Product: syz
[  248.249733][ T5854] usb 4-1: Manufacturer: syz
[  248.251205][ T5854] usb 4-1: SerialNumber: syz
[  248.257822][ T5854] usb 4-1: config 0 descriptor??
[  248.261728][T11129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  248.264310][T11129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  248.476070][T11129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  248.479183][T11129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  248.887159][ T5854] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  248.990262][T11156] loop2: detected capacity change from 0 to 32768
[  248.997887][T11156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2104 (11156)
[  249.010457][T11156] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.014517][T11156] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  249.017594][T11156] BTRFS info (device loop2): using free-space-tree
[  249.090370][ T5854] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  249.118316][ T5854] usb 4-1: USB disconnect, device number 15
[  249.129526][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.413825][T11185] netlink: 'syz.2.2110': attribute type 1 has an invalid length.
[  249.477817][T11185] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.042140][   T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  250.194934][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  250.199219][   T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  250.203221][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  250.206670][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.250736][T11206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  250.260227][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  250.292137][T11217] loop2: detected capacity change from 0 to 1024
[  250.346840][ T2966] hfsplus: b-tree write err: -5, ino 4
[  250.651708][   T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  250.702661][T11226] nfs: Unknown parameter 'ntext'
[  250.809762][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  250.813535][   T10] usb 3-1: config 179 has no interface number 0
[  250.816174][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  250.820532][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  250.827804][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  250.834899][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[  250.840271][   T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  250.846622][   T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  250.851705][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.864782][T11219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  250.873891][T11219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  251.084939][   T24] usb 3-1: USB disconnect, device number 23
[  251.085084][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  251.090560][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  251.858843][T11247] mmap: syz.1.2135 (11247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  252.154586][T11253] loop2: detected capacity change from 0 to 32768
[  252.157925][T11253] XFS: noikeep mount option is deprecated.
[  252.182327][T11253] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.226734][T11253] XFS (loop2): Ending clean mount
[  252.240770][T11253] XFS (loop2): Quotacheck needed: Please wait.
[  252.278243][T11253] XFS (loop2): Quotacheck: Done.
[  252.312580][   T33] audit: type=1804 audit(1755568262.234:105): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2138" name="/newroot/649/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  252.388466][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.770838][   T10] usb 4-1: USB disconnect, device number 16
[  253.061197][T11298] loop3: detected capacity change from 0 to 4096
[  253.580306][T11302] loop2: detected capacity change from 0 to 40427
[  253.587645][T11302] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  253.600901][T11302] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  253.634471][T11302] F2FS-fs (loop2): invalid crc value
[  253.758344][T11302] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  253.773034][T11302] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  253.775887][T11302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  254.253433][T11327] overlayfs: failed to clone upperpath
[  254.623956][T11344] overlayfs: failed to clone upperpath
[  254.995820][T11359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2181'.
[  255.095138][T11365] loop3: detected capacity change from 0 to 256
[  255.201360][T11371] netlink: 'syz.3.2187': attribute type 21 has an invalid length.
[  255.204164][T11371] netlink: 'syz.3.2187': attribute type 4 has an invalid length.
[  255.427852][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.430179][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.562643][T11389] loop8: detected capacity change from 0 to 7
[  255.573151][T11389] Dev loop8: unable to read RDB block 7
[  255.577643][T11389]  loop8: unable to read partition table
[  255.580284][T11389] loop8: partition table beyond EOD, truncated
[  255.587712][T11389] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  256.882110][   T33] audit: type=1326 audit(1755568522.812:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  256.914184][   T33] audit: type=1326 audit(1755568522.822:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  256.943331][   T33] audit: type=1326 audit(1755568522.832:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  256.965488][   T33] audit: type=1326 audit(1755568522.832:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  256.983958][T11427] loop3: detected capacity change from 0 to 256
[  256.990026][   T33] audit: type=1326 audit(1755568522.832:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  257.018137][   T33] audit: type=1326 audit(1755568522.842:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  257.042092][   T33] audit: type=1326 audit(1755568522.842:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  257.067535][   T33] audit: type=1326 audit(1755568522.842:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.2.2207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff838ebe9 code=0x7ffc0000
[  257.157891][T11436] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2215'.
[  257.359443][T11442] loop3: detected capacity change from 0 to 1024
[  257.439176][ T5911] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  257.626108][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0
[  257.628255][ T5911] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  257.631453][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.667781][ T5911] usb 3-1: config 0 descriptor??
[  257.891718][   T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  258.103564][   T47] usb 4-1: Using ep0 maxpacket: 8
[  258.109347][   T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  258.113089][   T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  258.116462][   T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  258.120023][   T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  258.126410][   T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  258.129424][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.604700][   T47] usb 4-1: GET_CAPABILITIES returned 0
[  258.608243][   T47] usbtmc 4-1:16.0: can't read capabilities
[  258.762881][ T5911] usbhid 3-1:0.0: can't add hid device: -71
[  258.764792][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  258.777629][ T5911] usb 3-1: USB disconnect, device number 24
[  258.816114][   T10] usb 4-1: USB disconnect, device number 17
[  259.343553][T11462] loop2: detected capacity change from 0 to 512
[  259.352365][T11462] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  259.359186][T11462] EXT4-fs (loop2): mount failed
[  259.647140][T11479] binder: 11477:11479 ioctl c0306201 200000000040 returned -14
[  259.754371][T11483] befs: Bad value for 'gid'
[  259.755774][T11483] befs: Bad value for 'gid'
[  259.809534][T11487] binder: BC_ATTEMPT_ACQUIRE not supported
[  259.819767][T11487] binder: 11486:11487 ioctl c0306201 2000000001c0 returned -22
[  259.827864][T11488] input: syz0 as /devices/virtual/input/input12
[  260.243369][T11512] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  260.390236][T11490] loop3: detected capacity change from 0 to 32768
[  260.480867][ T5852]  loop3: p1 p3 < >
[  260.641595][T11490]  loop3: p1 p3 < >
[  260.801485][T11519] loop2: detected capacity change from 0 to 256
[  260.851048][T11519] exfat: Deprecated parameter 'utf8'
[  261.083861][T11519] exFAT-fs (loop2): IO charset lacroman not found
[  261.229363][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  261.299010][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  261.567515][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  261.575999][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  262.175171][   T33] audit: type=1800 audit(1755568528.102:114): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2265" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  262.810960][T11564] loop2: detected capacity change from 0 to 32768
[  262.828366][T11564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2270 (11564)
[  262.847986][T11564] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.855013][T11564] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  262.858486][T11564] BTRFS info (device loop2): using free-space-tree
[  262.899208][T11564] BTRFS info (device loop2): rebuilding free space tree
[  263.008365][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.345934][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.361752][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.373920][T11589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.395359][   T33] audit: type=1326 audit(1755568530.332:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.423847][   T33] audit: type=1326 audit(1755568530.342:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.444976][   T33] audit: type=1326 audit(1755568530.342:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.465425][   T33] audit: type=1326 audit(1755568530.342:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.476173][T11617] loop3: detected capacity change from 0 to 512
[  264.479553][T11617] journal_path: Non-blockdev passed as './bus'
[  264.485799][   T33] audit: type=1326 audit(1755568530.342:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.501702][   T33] audit: type=1326 audit(1755568530.342:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.516311][   T33] audit: type=1326 audit(1755568530.442:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.530738][T11617] EXT4-fs: error: could not find journal device path
[  264.547907][   T33] audit: type=1326 audit(1755568530.442:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.576745][   T33] audit: type=1326 audit(1755568530.482:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  264.719618][T11623] loop2: detected capacity change from 0 to 512
[  264.739598][T11623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  264.791493][T11623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.797094][T11623] ext4 filesystem being mounted at /695/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.892457][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.386295][T11636] loop2: detected capacity change from 0 to 32768
[  265.389706][T11636] XFS: noikeep mount option is deprecated.
[  265.414997][T11636] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.461919][  T123] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  265.464632][T11636] XFS (loop2): Ending clean mount
[  265.475572][T11636] XFS (loop2): Quotacheck needed: Please wait.
[  265.521390][T11636] XFS (loop2): Quotacheck: Done.
[  265.580213][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.731159][T11671] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.023891][  T123] usb 4-1: unable to get BOS descriptor or descriptor too short
[  266.034113][  T123] usb 4-1: not running at top speed; connect to a high speed hub
[  266.046687][  T123] usb 4-1: config 3 has an invalid interface number: 106 but max is 0
[  266.050140][  T123] usb 4-1: config 3 has no interface number 0
[  266.055464][  T123] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  266.059373][  T123] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  266.071850][  T123] usb 4-1: config 3 interface 106 has no altsetting 0
[  266.077934][  T123] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  266.081361][  T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.089100][  T123] usb 4-1: Product: syz
[  266.090793][  T123] usb 4-1: Manufacturer: syz
[  266.105386][  T123] usb 4-1: SerialNumber: syz
[  266.118285][T11647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  266.121004][T11647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  266.295588][T11673] loop2: detected capacity change from 0 to 256
[  266.302400][T11673] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.306850][T11673] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  266.322381][T11673] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  266.351454][  T123] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected
[  266.366131][  T123] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  266.376475][  T123] usb 4-1: USB disconnect, device number 18
[  266.388056][  T123] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  266.398612][  T123] kobil_sct 4-1:3.106: device disconnected
[  266.937574][T11694] loop2: detected capacity change from 0 to 256
[  266.996334][T11694] FAT-fs (loop2): Directory bread(block 64) failed
[  266.998372][T11694] FAT-fs (loop2): Directory bread(block 65) failed
[  267.000639][T11694] FAT-fs (loop2): Directory bread(block 66) failed
[  267.013358][T11694] FAT-fs (loop2): Directory bread(block 67) failed
[  267.015717][T11694] FAT-fs (loop2): Directory bread(block 68) failed
[  267.017899][T11694] FAT-fs (loop2): Directory bread(block 69) failed
[  267.020525][T11694] FAT-fs (loop2): Directory bread(block 70) failed
[  267.039105][T11694] FAT-fs (loop2): Directory bread(block 71) failed
[  267.041426][T11694] FAT-fs (loop2): Directory bread(block 72) failed
[  267.056692][T11694] FAT-fs (loop2): Directory bread(block 73) failed
[  267.493725][T11709] loop2: detected capacity change from 0 to 512
[  267.504655][T11709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  267.567067][T11709] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  267.580294][T11709] EXT4-fs (loop2): 1 truncate cleaned up
[  267.586475][T11709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.636572][ T5851] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /708/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.651163][ T5851] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.675162][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.681037][ T5851] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /708/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.694239][ T5851] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.704771][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.710852][ T5851] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /708/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.723551][ T5851] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.735393][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.741504][ T5851] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /708/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.754473][ T5851] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.764673][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.777502][ T5851] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /708/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.790534][ T5851] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  267.799691][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.806013][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.812537][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.819036][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.825783][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  267.832730][ T5851] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  268.014549][T11715] loop3: detected capacity change from 0 to 4096
[  268.887746][ T6472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.012366][  T123] syz1: Port: 1 Link DOWN
[  269.147971][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.156583][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  269.306619][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.310603][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  269.452620][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.456607][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  269.551907][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.560366][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  269.588466][T11736] netlink: 'syz.1.2336': attribute type 4 has an invalid length.
[  269.671226][T11738] loop3: detected capacity change from 0 to 2048
[  269.870722][   T13] team0: left allmulticast mode
[  269.874389][   T13] team_slave_0: left allmulticast mode
[  269.876774][   T13] team_slave_1: left allmulticast mode
[  269.884443][   T13] team0: left promiscuous mode
[  269.886382][   T13] team_slave_0: left promiscuous mode
[  269.888703][   T13] team_slave_1: left promiscuous mode
[  269.895029][   T13] bridge0: port 3(team0) entered disabled state
[  269.912653][   T13] bridge_slave_1: left allmulticast mode
[  269.914987][   T13] bridge_slave_1: left promiscuous mode
[  269.917374][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.926975][   T13] bridge_slave_0: left allmulticast mode
[  269.929212][   T13] bridge_slave_0: left promiscuous mode
[  269.931643][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.998233][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  270.005826][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  270.011954][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  270.019563][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  270.023620][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  270.056636][T11749] loop3: detected capacity change from 0 to 2048
[  270.366811][   T13] bond2 (unregistering): (slave geneve2): Releasing backup interface
[  270.401811][  T123] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  270.562084][  T123] usb 4-1: Using ep0 maxpacket: 32
[  270.567378][  T123] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  270.570476][  T123] usb 4-1: config 0 has no interface number 0
[  270.575534][  T123] usb 4-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4
[  270.579006][  T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.582337][  T123] usb 4-1: Product: syz
[  270.584011][  T123] usb 4-1: Manufacturer: syz
[  270.585787][  T123] usb 4-1: SerialNumber: syz
[  270.590326][  T123] usb 4-1: config 0 descriptor??
[  270.594984][  T123] usb-storage 4-1:0.229: USB Mass Storage device detected
[  270.758061][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.764344][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.768808][   T13] bond0 (unregistering): Released all slaves
[  270.778147][   T13] bond1 (unregistering): Released all slaves
[  270.788444][   T13] bond2 (unregistering): Released all slaves
[  270.810040][ T5911] usb 4-1: USB disconnect, device number 19
[  270.934205][   T13] bond3 (unregistering): Released all slaves
[  270.949108][ T5877] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.960629][ T5877] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.967707][ T5877] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.971174][ T5877] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.258985][T11750] chnl_net:caif_netlink_parms(): no params data found
[  271.334577][   T13] hsr_slave_0: left promiscuous mode
[  271.337222][   T13] hsr_slave_1: left promiscuous mode
[  271.339972][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.344559][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.350368][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.362061][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.377480][   T13] veth1_macvtap: left promiscuous mode
[  271.379126][   T13] veth0_macvtap: left promiscuous mode
[  271.381124][   T13] veth1_vlan: left promiscuous mode
[  271.383266][   T13] veth0_vlan: left promiscuous mode
[  271.674241][T11769] loop3: detected capacity change from 0 to 32768
[  272.072704][   T55] Bluetooth: hci2: command tx timeout
[  272.356927][   T13] team0 (unregistering): Port device team_slave_1 removed
[  272.455088][ T5911] hid (null): global environment stack underflow
[  272.457806][ T5911] hid (null): unknown global tag 0xe
[  272.486337][ T5911] hid-generic 0005:0B57:000F.0008: reserved main item tag 0xe
[  272.489670][ T5911] hid-generic 0005:0B57:000F.0008: global environment stack underflow
[  272.496048][ T5911] hid-generic 0005:0B57:000F.0008: item 0 1 1 11 parsing failed
[  272.499545][ T5911] hid-generic 0005:0B57:000F.0008: probe with driver hid-generic failed with error -22
[  272.504165][   T13] team0 (unregistering): Port device team_slave_0 removed
[  272.690132][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  272.690146][   T33] audit: type=1326 audit(1755568538.622:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.701931][   T33] audit: type=1326 audit(1755568538.622:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.714090][   T33] audit: type=1326 audit(1755568538.642:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.723073][   T33] audit: type=1326 audit(1755568538.642:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.731366][   T33] audit: type=1326 audit(1755568538.652:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.739919][   T33] audit: type=1326 audit(1755568538.652:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.748255][   T33] audit: type=1326 audit(1755568538.652:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.757148][   T33] audit: type=1326 audit(1755568538.682:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.766288][   T33] audit: type=1326 audit(1755568538.682:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  272.775033][   T33] audit: type=1326 audit(1755568538.682:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.3.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  273.276081][T11816] loop3: detected capacity change from 0 to 512
[  273.314487][T11816] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  273.317759][T11816] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002]
[  273.337105][T11816] System zones: 0-1, 15-15, 18-18, 34-34
[  273.339848][T11816] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup
[  273.345307][T11816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.420400][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.780803][T11750] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.786516][T11750] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.789278][T11750] bridge_slave_0: entered allmulticast mode
[  273.795950][T11750] bridge_slave_0: entered promiscuous mode
[  273.880619][T11750] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.883617][T11750] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.886395][T11750] bridge_slave_1: entered allmulticast mode
[  273.889970][T11750] bridge_slave_1: entered promiscuous mode
[  274.035855][T11750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.070380][T11750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.144150][   T55] Bluetooth: hci2: command tx timeout
[  274.145480][T11750] team0: Port device team_slave_0 added
[  274.154949][T11750] team0: Port device team_slave_1 added
[  274.207990][T11750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.210255][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.218594][T11750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.225074][T11750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.227343][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.235536][ T5911] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  274.238361][T11750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.273628][T11750] hsr_slave_0: entered promiscuous mode
[  274.276053][T11750] hsr_slave_1: entered promiscuous mode
[  274.284211][   T13] IPVS: stop unused estimator thread 0...
[  274.402800][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  274.406266][T11750] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  274.408633][ T5911] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  274.411166][ T5911] usb 4-1: config 0 has no interface number 0
[  274.413368][ T5911] usb 4-1: config 0 interface 230 has no altsetting 0
[  274.419684][ T5911] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  274.420533][T11750] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  274.422396][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.422408][ T5911] usb 4-1: Product: syz
[  274.422492][ T5911] usb 4-1: Manufacturer: syz
[  274.422499][ T5911] usb 4-1: SerialNumber: syz
[  274.424906][ T5911] usb 4-1: config 0 descriptor??
[  274.439177][ T5911] ums-usbat 4-1:0.230: USB Mass Storage device detected
[  274.440746][T11750] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  274.444610][ T5911] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  274.453287][T11750] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  274.545098][T11750] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.571197][T11750] 8021q: adding VLAN 0 to HW filter on device team0
[  274.586987][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.589725][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.598380][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.601030][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.782482][T11750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.968032][T11750] veth0_vlan: entered promiscuous mode
[  274.976904][T11750] veth1_vlan: entered promiscuous mode
[  275.001816][T11750] veth0_macvtap: entered promiscuous mode
[  275.006228][T11750] veth1_macvtap: entered promiscuous mode
[  275.020980][T11750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.028509][T11750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.037167][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.040305][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.046693][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.050341][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.136087][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.138644][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.169025][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.172110][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.376916][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027939400: rx timeout, send abort
[  275.379712][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027939400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  275.451358][T11878] loop4: detected capacity change from 0 to 512
[  275.474277][T11878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  275.478326][T11878] System zones: 1-12
[  275.480874][T11878] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2386: Directory hole found for htree index block 0
[  275.493658][T11878] EXT4-fs (loop4): Remounting filesystem read-only
[  275.496228][T11878] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  275.499055][T11878] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  275.503924][T11878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.517366][T11878] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  275.533657][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.649088][T11885] loop4: detected capacity change from 0 to 512
[  275.656551][T11885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  275.668148][T11885] EXT4-fs (loop4): 1 truncate cleaned up
[  275.678222][T11885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.698611][T11885] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.2388: path /newroot/5/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0
[  275.708267][T11885] EXT4-fs (loop4): Remounting filesystem read-only
[  275.734260][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.221854][   T55] Bluetooth: hci2: command tx timeout
[  276.287267][T11923] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.2405'.
[  276.745804][ T5911] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5
[  276.802678][T11935] loop4: detected capacity change from 0 to 512
[  276.815724][T11935] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  276.827115][T11935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  276.832197][T11935] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2411: corrupted in-inode xattr: e_value size too large
[  276.838562][T11935] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2411: couldn't read orphan inode 15 (err -117)
[  276.845426][T11935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.914416][ T5854] usb 4-1: USB disconnect, device number 20
[  277.748586][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.193047][T11950] loop4: detected capacity change from 0 to 4096
[  278.302596][   T55] Bluetooth: hci2: command tx timeout
[  278.347991][T11951] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.508659][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  278.508721][   T33] audit: type=1800 audit(1755568544.442:152): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2416" name="file1" dev="loop4" ino=15 res=0 errno=0
[  278.627358][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'.
[  279.567442][T11981] loop3: detected capacity change from 0 to 2048
[  279.793290][T11993] loop4: detected capacity change from 0 to 47
[  281.580643][T12042] loop3: detected capacity change from 0 to 32768
[  281.622869][ T5852]  loop3: p1 p3 < >
[  281.632434][T12042]  loop3: p1 p3 < >
[  281.758775][T12052] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2462'.
[  281.787793][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  281.795938][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  281.812772][T12055] overlayfs: failed to clone upperpath
[  281.843099][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  281.844280][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  281.994665][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'.
[  281.997546][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'.
[  282.809643][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2476'.
[  282.814454][T12082] netlink: 'syz.3.2476': attribute type 1 has an invalid length.
[  282.817400][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'.
[  283.084051][T12088] loop3: detected capacity change from 0 to 64
[  283.258407][T12097] loop3: detected capacity change from 0 to 512
[  283.328263][T12101] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2485'.
[  283.484118][T12107] loop3: detected capacity change from 0 to 2048
[  283.512828][   T33] audit: type=1326 audit(1755568549.452:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  283.551799][   T33] audit: type=1326 audit(1755568549.452:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  283.558785][   T33] audit: type=1326 audit(1755568549.462:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  283.575118][   T33] audit: type=1326 audit(1755568549.462:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  283.599431][   T33] audit: type=1326 audit(1755568549.462:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  283.737126][T12111] loop3: detected capacity change from 0 to 32768
[  283.754011][T12111] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2490 (12111)
[  283.759377][T12111] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  283.950176][T12122] futex_wake_op: syz.4.2495 tries to shift op by 32; fix this program
[  285.573365][T12168] loop4: detected capacity change from 0 to 32768
[  285.624965][T12170] loop3: detected capacity change from 0 to 32768
[  285.628253][T12168] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  286.120755][T12185] loop3: detected capacity change from 0 to 32768
[  286.125123][T12185] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  286.436740][T12188] loop3: detected capacity change from 0 to 40427
[  286.641094][T11750] (syz-executor,11750,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  286.660864][T11750] ocfs2: Unmounting device (7,4) on (node local)
[  287.368688][T12209] loop4: detected capacity change from 0 to 164
[  287.375537][T12209] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  287.383517][T12209] tmpfs: Bad value for 'mpol'
[  287.563528][T12218] futex_wake_op: syz.4.2532 tries to shift op by -1; fix this program
[  287.772583][T12233] loop3: detected capacity change from 0 to 16
[  287.791118][T12233] erofs (device loop3): mounted with root inode @ nid 36.
[  287.976120][T12223] loop4: detected capacity change from 0 to 40427
[  287.984195][T12223] F2FS-fs (loop4): build fault injection rate: 771
[  287.993772][T12223] F2FS-fs (loop4): invalid crc value
[  288.037468][T12223] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.043954][T12223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  288.088650][T11750] syz-executor: attempt to access beyond end of device
[  288.088650][T11750] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.096347][T11750] CPU: 1 UID: 0 PID: 11750 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  288.096364][T11750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.096370][T11750] Call Trace:
[  288.096373][T11750]  <TASK>
[  288.096379][T11750]  dump_stack_lvl+0x189/0x250
[  288.096395][T11750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.096405][T11750]  ? __pfx_queue_work_on+0x10/0x10
[  288.096443][T11750]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  288.096454][T11750]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  288.096477][T11750]  f2fs_handle_critical_error+0x37c/0x540
[  288.096493][T11750]  f2fs_write_end_io+0x886/0xb60
[  288.096510][T11750]  __submit_merged_bio+0x27a/0x6a0
[  288.096524][T11750]  __submit_merged_write_cond+0x255/0x530
[  288.096539][T11750]  f2fs_write_data_pages+0x261d/0x3000
[  288.096566][T11750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.096603][T11750]  ? folios_put_refs+0x559/0x640
[  288.096619][T11750]  ? __lock_acquire+0xab9/0xd20
[  288.096635][T11750]  ? do_raw_spin_lock+0x121/0x290
[  288.096649][T11750]  ? do_raw_spin_unlock+0x4d/0x240
[  288.096659][T11750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.096671][T11750]  do_writepages+0x32e/0x550
[  288.096687][T11750]  ? do_raw_spin_unlock+0x4d/0x240
[  288.096698][T11750]  filemap_fdatawrite+0x199/0x240
[  288.096710][T11750]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  288.096742][T11750]  ? do_raw_spin_unlock+0x4d/0x240
[  288.096754][T11750]  f2fs_sync_dirty_inodes+0x31f/0x830
[  288.096769][T11750]  f2fs_write_checkpoint+0x95a/0x1df0
[  288.096792][T11750]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  288.096818][T11750]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  288.096826][T11750]  ? kfree+0x18e/0x440
[  288.096842][T11750]  ? kill_f2fs_super+0x298/0x6c0
[  288.096853][T11750]  kill_f2fs_super+0x2c3/0x6c0
[  288.096864][T11750]  ? __pfx_kill_f2fs_super+0x10/0x10
[  288.096871][T11750]  ? radix_tree_delete_item+0x2b6/0x400
[  288.096902][T11750]  ? shrinker_free+0x2ce/0x3e0
[  288.096913][T11750]  deactivate_locked_super+0xbc/0x130
[  288.096925][T11750]  cleanup_mnt+0x425/0x4c0
[  288.096935][T11750]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.096948][T11750]  task_work_run+0x1d4/0x260
[  288.096960][T11750]  ? __pfx_task_work_run+0x10/0x10
[  288.096970][T11750]  ? __x64_sys_umount+0x122/0x160
[  288.096983][T11750]  ? exit_to_user_mode_loop+0x40/0x110
[  288.096996][T11750]  exit_to_user_mode_loop+0xec/0x110
[  288.097008][T11750]  do_syscall_64+0x2bd/0x3b0
[  288.097020][T11750]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.097029][T11750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.097037][T11750]  ? exc_page_fault+0x9f/0xf0
[  288.097048][T11750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.097056][T11750] RIP: 0033:0x7ffae518ff17
[  288.097066][T11750] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  288.097074][T11750] RSP: 002b:00007ffc361d5488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  288.097083][T11750] RAX: 0000000000000000 RBX: 00007ffae5211c05 RCX: 00007ffae518ff17
[  288.097089][T11750] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc361d5540
[  288.097094][T11750] RBP: 00007ffc361d5540 R08: 0000000000000000 R09: 0000000000000000
[  288.097099][T11750] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc361d65d0
[  288.097104][T11750] R13: 00007ffae5211c05 R14: 00000000000464da R15: 00007ffc361d6610
[  288.097118][T11750]  </TASK>
[  288.097203][T11750] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  288.227188][T12245] 9pnet_fd: Insufficient options for proto=fd
[  288.354984][T12233] erofs (device loop3): read error -117 @ 8200 of nid 36
[  288.711013][T12263] loop4: detected capacity change from 0 to 32768
[  288.724258][T12263] read_mapping_page failed!
[  288.725923][T12263] ERROR: (device loop4): txCommit: 
[  288.725923][T12263] 
[  288.736945][T12263] jfs_mkdir: dtSearch returned -17
[  289.050531][T12277] loop4: detected capacity change from 0 to 4096
[  289.071919][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  289.220039][T12280] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.591090][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  289.597909][ T5912] usb 4-1: config 0 has an invalid interface number: 23 but max is 0
[  289.601032][ T5912] usb 4-1: config 0 has no interface number 0
[  289.604065][ T5912] usb 4-1: config 0 interface 23 has no altsetting 0
[  289.609412][ T5912] usb 4-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  289.615212][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.615621][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.621171][ T5912] usb 4-1: Product: syz
[  289.623401][ T5912] usb 4-1: Manufacturer: syz
[  289.625008][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.625253][ T5912] usb 4-1: SerialNumber: syz
[  289.635199][ T5912] usb 4-1: config 0 descriptor??
[  289.655455][T12280] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  289.708056][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.711259][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.717180][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.720766][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.725935][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.729335][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.733629][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.737208][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.853619][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.858041][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.875120][ T5912] kaweth 4-1:0.23: Firmware present in device.
[  289.878766][ T5912] kaweth 4-1:0.23: Error reading configuration (-71), no net device created
[  289.890190][ T5912] kaweth 4-1:0.23: probe with driver kaweth failed with error -5
[  289.899200][ T5912] usb 4-1: USB disconnect, device number 21
[  290.006560][T12286] loop4: detected capacity change from 0 to 512
[  290.010326][T12286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.031445][T12286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  290.035386][T12286] System zones: 1-12
[  290.042599][T12286] EXT4-fs (loop4): 1 truncate cleaned up
[  290.053555][T12286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.063568][T12286] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted
[  290.100603][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.134837][   T33] audit: type=1326 audit(1755568556.072:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.152822][   T33] audit: type=1326 audit(1755568556.072:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.161435][   T33] audit: type=1326 audit(1755568556.092:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.173728][   T33] audit: type=1326 audit(1755568556.092:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.183401][   T33] audit: type=1326 audit(1755568556.092:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.191132][   T33] audit: type=1326 audit(1755568556.092:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.201253][   T33] audit: type=1326 audit(1755568556.092:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.212334][   T33] audit: type=1326 audit(1755568556.092:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.220251][   T33] audit: type=1326 audit(1755568556.092:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  290.236433][   T33] audit: type=1326 audit(1755568556.092:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.1.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7ffc0000
[  291.229127][T12311] loop3: detected capacity change from 0 to 512
[  291.254451][T12311] EXT4-fs: Ignoring removed oldalloc option
[  292.020225][T12333] affs: No valid root block on device nullb0
[  292.761472][T12335] loop4: detected capacity change from 0 to 4096
[  293.110245][T12341] loop3: detected capacity change from 0 to 512
[  293.435383][T12351] loop3: detected capacity change from 0 to 32768
[  293.451737][T12359] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  293.639513][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2602'.
[  293.698956][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'.
[  293.928295][T12373] Process accounting resumed
[  294.048764][T12396] netlink: 'syz.3.2610': attribute type 1 has an invalid length.
[  294.051276][T12396] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2610'.
[  294.352424][T12400] loop3: detected capacity change from 0 to 32768
[  294.545891][T12424] 9pnet_fd: p9_fd_create_tcp (12424): problem connecting socket to 127.0.0.1
[  294.882665][T12453] loop3: detected capacity change from 0 to 1024
[  294.952451][T12457] loop3: detected capacity change from 0 to 764
[  294.960408][T12457] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  295.119369][T12465] loop3: detected capacity change from 0 to 256
[  295.170474][T12469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2646'.
[  295.173703][T12469] tipc: Started in network mode
[  295.175303][T12469] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  295.183539][T12469] tipc: Enabled bearer <udp:syz0>, priority 0
[  295.238332][T12473] loop3: detected capacity change from 0 to 512
[  296.191264][ T5854] tipc: Node number set to 4269801514
[  296.257664][T12497] 9pnet_fd: Insufficient options for proto=fd
[  296.914605][T12522] loop3: detected capacity change from 0 to 128
[  297.341138][T12539] loop4: detected capacity change from 0 to 1764
[  297.604443][T12550] loop4: detected capacity change from 0 to 128
[  297.616623][T12550] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  297.626885][T12550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.957263][T12556] loop4: detected capacity change from 0 to 32768
[  298.045271][T12556] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  298.045287][T12556]   allowing incompatible features above 0.0: (unknown version)
[  298.045292][T12556]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  298.053135][T12569] loop3: detected capacity change from 0 to 2048
[  298.062285][T12556] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  298.064849][T12556] bcachefs (loop4): initializing new filesystem
[  298.072408][T12556] bcachefs (loop4): going read-write
[  298.089649][T12556] bcachefs (loop4): marking superblocks
[  298.155485][T12556] bcachefs (loop4): initializing freespace
[  298.167463][T12556] bcachefs (loop4): done initializing freespace
[  298.177944][T12556] bcachefs (loop4): reading snapshots table
[  298.181870][T12556] bcachefs (loop4): reading snapshots done
[  298.214786][T12556] bcachefs (loop4): done starting filesystem
[  298.319465][T11750] bcachefs (loop4): shutting down
[  298.321230][T11750] bcachefs (loop4): going read-only
[  298.326120][T11750] bcachefs (loop4): finished waiting for writes to stop
[  298.329801][T11750] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7
[  298.370718][T11750] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 9
[  298.376945][T11750] bcachefs (loop4): clean shutdown complete, journal seq 10
[  298.379458][T11750] bcachefs (loop4): marking filesystem clean
[  298.413286][T11750] bcachefs (loop4): shutdown complete
[  298.856341][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  299.610588][T12629] loop3: detected capacity change from 0 to 32768
[  299.849853][T12641] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2718'.
[  300.993518][T12647] loop3: detected capacity change from 0 to 40427
[  301.270157][T12655] loop4: detected capacity change from 0 to 40427
[  301.276533][T12655] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  301.570296][T12655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  301.647927][T12655] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.657866][T12655] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  301.660512][T12655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  301.688793][T12655] syz.4.2725: attempt to access beyond end of device
[  301.688793][T12655] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  301.736958][T11750] syz-executor: attempt to access beyond end of device
[  301.736958][T11750] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  301.741260][T11750] CPU: 1 UID: 0 PID: 11750 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  301.741272][T11750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.741277][T11750] Call Trace:
[  301.741281][T11750]  <TASK>
[  301.741285][T11750]  dump_stack_lvl+0x189/0x250
[  301.741302][T11750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.741312][T11750]  ? __pfx_queue_work_on+0x10/0x10
[  301.741321][T11750]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  301.741332][T11750]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  301.741348][T11750]  f2fs_handle_critical_error+0x37c/0x540
[  301.741364][T11750]  f2fs_write_end_io+0x886/0xb60
[  301.741382][T11750]  __submit_merged_bio+0x27a/0x6a0
[  301.741397][T11750]  __submit_merged_write_cond+0x255/0x530
[  301.741434][T11750]  f2fs_write_data_pages+0x261d/0x3000
[  301.741466][T11750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.741485][T11750]  ? arch_stack_walk+0xfc/0x150
[  301.741509][T11750]  ? __mod_zone_page_state+0xd7/0x140
[  301.741541][T11750]  ? folios_put_refs+0x560/0x640
[  301.741557][T11750]  ? __pfx_folios_put_refs+0x10/0x10
[  301.741564][T11750]  ? rcu_is_watching+0x15/0xb0
[  301.741578][T11750]  ? __lock_acquire+0xab9/0xd20
[  301.741599][T11750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.741611][T11750]  do_writepages+0x32e/0x550
[  301.741628][T11750]  ? do_raw_spin_unlock+0x4d/0x240
[  301.741640][T11750]  filemap_fdatawrite+0x199/0x240
[  301.741652][T11750]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  301.741688][T11750]  ? do_raw_spin_unlock+0x4d/0x240
[  301.741700][T11750]  f2fs_sync_dirty_inodes+0x31f/0x830
[  301.741716][T11750]  f2fs_write_checkpoint+0x95a/0x1df0
[  301.741737][T11750]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  301.741768][T11750]  ? call_rcu+0x6ff/0x9c0
[  301.741776][T11750]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.741787][T11750]  ? kill_f2fs_super+0x298/0x6c0
[  301.741800][T11750]  kill_f2fs_super+0x2c3/0x6c0
[  301.741812][T11750]  ? __pfx_kill_f2fs_super+0x10/0x10
[  301.741819][T11750]  ? radix_tree_delete_item+0x2b6/0x400
[  301.741833][T11750]  ? shrinker_free+0x2ce/0x3e0
[  301.741844][T11750]  deactivate_locked_super+0xbc/0x130
[  301.741856][T11750]  cleanup_mnt+0x425/0x4c0
[  301.741866][T11750]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.741877][T11750]  task_work_run+0x1d4/0x260
[  301.741890][T11750]  ? __pfx_task_work_run+0x10/0x10
[  301.741899][T11750]  ? __x64_sys_umount+0x122/0x160
[  301.741913][T11750]  ? exit_to_user_mode_loop+0x40/0x110
[  301.741927][T11750]  exit_to_user_mode_loop+0xec/0x110
[  301.741938][T11750]  do_syscall_64+0x2bd/0x3b0
[  301.741949][T11750]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.741959][T11750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.741967][T11750]  ? exc_page_fault+0x9f/0xf0
[  301.741978][T11750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.741986][T11750] RIP: 0033:0x7ffae518ff17
[  301.741994][T11750] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  301.742002][T11750] RSP: 002b:00007ffc361d5488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  301.742012][T11750] RAX: 0000000000000000 RBX: 00007ffae5211c05 RCX: 00007ffae518ff17
[  301.742017][T11750] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc361d5540
[  301.742022][T11750] RBP: 00007ffc361d5540 R08: 0000000000000000 R09: 0000000000000000
[  301.742027][T11750] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc361d65d0
[  301.742032][T11750] R13: 00007ffae5211c05 R14: 0000000000049a27 R15: 00007ffc361d6610
[  301.742052][T11750]  </TASK>
[  301.853372][T11750] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  303.603233][T12706] loop4: detected capacity change from 0 to 32768
[  303.606422][T12706] btrfs: Deprecated parameter 'usebackuproot'
[  303.609605][T12706] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  303.613577][T12706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2744 (12706)
[  303.836146][T12708] loop3: detected capacity change from 0 to 40427
[  303.929750][T12706] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  303.938502][T12706] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  303.943058][T12706] BTRFS info (device loop4): using free-space-tree
[  304.022708][  T145] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  304.031062][T12706] BTRFS error (device loop4): failed to load root extent
[  304.035942][T12706] BTRFS warning (device loop4): try to load backup roots slot 1
[  304.039529][  T145] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  304.045946][T12706] BTRFS warning (device loop4): couldn't read tree root
[  304.048387][T12706] BTRFS warning (device loop4): try to load backup roots slot 2
[  304.051178][  T145] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  304.059649][T12706] BTRFS warning (device loop4): couldn't read tree root
[  304.062715][T12706] BTRFS warning (device loop4): try to load backup roots slot 3
[  304.084726][T12706] BTRFS info (device loop4): rebuilding free space tree
[  304.107569][T12706] BTRFS info (device loop4): checking UUID tree
[  304.420161][T12731] netlink: 'syz.1.2747': attribute type 12 has an invalid length.
[  304.521059][T11750] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  304.939048][T12745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.058864][T12747] loop4: detected capacity change from 0 to 512
[  305.064818][T12747] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  305.078160][T12747] EXT4-fs (loop4): orphan cleanup on readonly fs
[  305.094619][T12747] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 8: comm syz.4.2755: invalid block
[  305.112370][T12747] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2755: couldn't read orphan inode 11 (err -117)
[  305.133573][T12747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  305.202065][T12747] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (57259!=33349)
[  305.305528][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.474328][T12754] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.493340][T12756] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  305.501936][T12756] PKCS7: Only support pkcs7_signedData type
[  305.668738][T12768] netlink: zone id is out of range
[  305.670793][T12768] netlink: zone id is out of range
[  305.673593][T12768] netlink: zone id is out of range
[  305.675273][T12768] netlink: zone id is out of range
[  305.676874][T12768] netlink: zone id is out of range
[  305.678386][T12768] netlink: zone id is out of range
[  305.679948][T12768] netlink: zone id is out of range
[  305.682592][T12768] netlink: zone id is out of range
[  305.684446][T12768] netlink: zone id is out of range
[  305.686314][T12768] netlink: zone id is out of range
[  305.861893][  T792] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  306.011865][  T792] usb 4-1: Using ep0 maxpacket: 8
[  306.016549][  T792] usb 4-1: config 162 has an invalid interface number: 197 but max is 1
[  306.019625][  T792] usb 4-1: config 162 has an invalid interface number: 143 but max is 1
[  306.023572][  T792] usb 4-1: config 162 has no interface number 0
[  306.025680][  T792] usb 4-1: config 162 has no interface number 1
[  306.027950][  T792] usb 4-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  306.033428][  T792] usb 4-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  306.037068][  T792] usb 4-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  306.041255][  T792] usb 4-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  306.046660][  T792] usb 4-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  306.050697][  T792] usb 4-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  306.057246][  T792] usb 4-1: config 162 interface 197 has no altsetting 0
[  306.060193][  T792] usb 4-1: config 162 interface 143 has no altsetting 0
[  306.066577][  T792] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  306.069971][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.074627][  T792] usb 4-1: Product: syz
[  306.076011][  T792] usb 4-1: Manufacturer: syz
[  306.077606][  T792] usb 4-1: SerialNumber: syz
[  306.319385][  T792] usb 4-1: USB disconnect, device number 22
[  306.322330][   T55] Bluetooth: hci3: HCI Read Local Supported Commands not supported
[  306.330200][ T5235] Bluetooth: hci3: sending frame failed (-19)
[  306.336278][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[  307.071702][T12807] loop3: detected capacity change from 0 to 4096
[  307.074557][T12807] EXT4-fs: Ignoring removed nobh option
[  307.434754][T12823] loop3: detected capacity change from 0 to 32768
[  307.440438][T12823] XFS: ikeep mount option is deprecated.
[  307.447073][T12823] XFS: ikeep mount option is deprecated.
[  307.449040][T12823] XFS: noikeep mount option is deprecated.
[  308.216125][T12859] loop3: detected capacity change from 0 to 40427
[  308.529083][T12888] loop3: detected capacity change from 0 to 256
[  308.607225][T12894] sock: sock_timestamping_bind_phc: sock not bind to device
[  308.780643][T12892] loop3: detected capacity change from 0 to 40427
[  309.201507][T12911] loop3: detected capacity change from 0 to 32768
[  309.205442][T12898] loop4: detected capacity change from 0 to 40427
[  309.208731][T12911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2833 (12911)
[  309.219822][T12911] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.224932][T12911] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  309.228460][T12911] BTRFS info (device loop3 state S): using free-space-tree
[  309.258170][   T26] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xb6869543 level 0, ignored
[  309.273703][T12911] BTRFS error (device loop3 state S): failed to find fsid c9fe44da-de57-406a-8241-570000000000 when attempting to open seed devices
[  309.278608][T12911] BTRFS error (device loop3 state S): failed to read chunk tree: -2
[  309.299065][T12898] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  309.321211][T12898] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  309.340941][T12911] BTRFS error (device loop3 state S): open_ctree failed: -2
[  309.419190][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2835'.
[  309.438060][T11750] syz-executor: attempt to access beyond end of device
[  309.438060][T11750] loop4: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  309.444035][T11750] F2FS-fs (loop4): Issue discard(9728, 9728, 1) failed, ret: -5
[  309.499693][T12933] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2836'.
[  309.620414][T12941] CIFS: VFS: Malformed UNC in devname
[  309.950550][T12961] sctp: [Deprecated]: syz.3.2849 (pid 12961) Use of struct sctp_assoc_value in delayed_ack socket option.
[  309.950550][T12961] Use struct sctp_sack_info instead
[  310.245113][T12969] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2852'.
[  310.248529][T12963] loop4: detected capacity change from 0 to 32768
[  310.263557][T12963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2850 (12963)
[  310.285386][T12963] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  310.289271][T12963] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  310.301177][T12963] BTRFS info (device loop4): disk space caching is enabled
[  310.304504][T12963] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  310.388169][T12963] BTRFS info (device loop4): rebuilding free space tree
[  310.405675][T12963] BTRFS info (device loop4): disabling free space tree
[  310.407824][T12963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  310.410766][T12963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  310.477406][T12963] BTRFS info (device loop4): balance: start -d -m
[  310.508903][T12963] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  310.538643][T12991] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component
[  310.567542][T12963] BTRFS info (device loop4): balance: paused
[  310.583369][  T792] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  310.614240][T11750] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  310.739163][  T792] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  310.742356][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.744776][  T792] usb 4-1: Product: syz
[  310.745970][  T792] usb 4-1: Manufacturer: syz
[  310.747316][  T792] usb 4-1: SerialNumber: syz
[  310.761371][  T792] usb 4-1: config 0 descriptor??
[  310.986552][  T792] hso 4-1:0.0: Failed to find BULK IN ep
[  311.196887][    T9] usb 4-1: USB disconnect, device number 23
[  312.840967][T13049] CIFS mount error: No usable UNC path provided in device string!
[  312.840967][T13049] 
[  312.845053][T13049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  312.976400][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  312.976416][   T33] audit: type=1326 audit(1755568578.912:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  312.987504][   T33] audit: type=1326 audit(1755568578.922:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  312.997362][   T33] audit: type=1326 audit(1755568578.922:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2883" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  313.009901][   T33] audit: type=1326 audit(1755568578.922:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  313.019727][   T33] audit: type=1326 audit(1755568578.922:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7118ebe9 code=0x7ffc0000
[  313.078625][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'.
[  313.082557][T13059] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  313.125494][T13061] loop3: detected capacity change from 0 to 256
[  313.531713][ T5911] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  313.685894][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.699884][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  313.703876][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  313.708759][ T5911] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  313.715098][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.736501][ T5911] hub 4-1:1.0: bad descriptor, ignoring hub
[  313.738851][ T5911] hub 4-1:1.0: probe with driver hub failed with error -5
[  313.751961][ T5911] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  314.046970][ T5854] usb 4-1: USB disconnect, device number 24
[  314.436908][T13101] binder: 13100:13101 ioctl c018620c 200000000040 returned -22
[  314.768445][T13111] loop3: detected capacity change from 0 to 32768
[  314.773264][T13111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2910 (13111)
[  314.787225][T13111] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  314.799040][T13114] mmap: syz.1.2911 (13114): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  314.975484][T13121] trusted_key: encrypted_key: key trusted:syz not found
[  315.514621][T13143] CUSE: unknown device info ""
[  315.518830][T13143] CUSE: unknown device info ""
[  315.520684][T13143] CUSE: unknown device info ""
[  315.526079][T13143] CUSE: unknown device info ""
[  315.528105][T13143] CUSE: zero length info key specified
[  315.574186][T13146] misc userio: The device must be registered before sending interrupts
[  315.820200][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'.
[  315.826325][T13163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2934'.
[  316.101696][  T792] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  316.282011][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.286271][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.290169][  T792] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  316.316871][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.326611][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2940'.
[  316.330532][T13176] unsupported nlmsg_type 40
[  316.335388][  T792] usb 4-1: config 0 descriptor??
[  316.749207][  T792] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  316.866687][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.868850][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.879530][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'.
[  316.886661][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'.
[  316.946574][  T792] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71
[  316.971226][  T792] usb 4-1: USB disconnect, device number 25
[  317.255699][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'.
[  317.287730][T13205] net_ratelimit: 61 callbacks suppressed
[  317.287742][T13205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  317.574313][T13223] loop3: detected capacity change from 0 to 128
[  317.828986][T13238] loop3: detected capacity change from 0 to 512
[  317.890401][T13240] loop3: detected capacity change from 0 to 128
[  318.224056][T13252] loop3: detected capacity change from 0 to 512
[  318.540743][T13254] loop4: detected capacity change from 0 to 32768
[  318.546617][T13264] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  318.562743][T13254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2975 (13254)
[  318.597357][T13254] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.611693][T13254] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  318.616122][T13254] BTRFS info (device loop4): using free-space-tree
[  318.711265][T11750] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.249102][T13302] loop4: detected capacity change from 0 to 32768
[  319.306034][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'.
[  319.884995][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'.
[  320.687131][T13358] cgroup: fork rejected by pids controller in /syz1
[  321.501774][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  321.839335][T16165] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  322.077451][T16185] loop3: detected capacity change from 0 to 1024
[  322.085486][T16185] EXT4-fs: Ignoring removed orlov option
[  322.375015][T16189] loop3: detected capacity change from 0 to 32768
[  322.501428][T16198] netlink: 'syz.1.3042': attribute type 2 has an invalid length.
[  322.503951][T16198] netlink: 'syz.1.3042': attribute type 8 has an invalid length.
[  322.506795][T16198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3042'.
[  323.721730][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  323.826662][T16229] netlink: 1332 bytes leftover after parsing attributes in process `syz.1.3055'.
[  323.877456][T16229] hsr_slave_1 (unregistering): left promiscuous mode
[  323.882634][ T5884] usb 4-1: Using ep0 maxpacket: 32
[  323.889996][ T5884] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  323.902312][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.919247][ T5884] usb 4-1: config 0 has no interface number 0
[  323.920017][T16231] loop4: detected capacity change from 0 to 1024
[  323.924177][ T5884] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.925382][T16231] EXT4-fs: inline encryption not supported
[  323.934718][T16231] EXT4-fs: Ignoring removed bh option
[  323.953197][ T5884] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  323.953913][T16231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.961724][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.964762][ T5884] usb 4-1: Product: syz
[  323.966485][ T5884] usb 4-1: Manufacturer: syz
[  323.980744][ T5884] usb 4-1: SerialNumber: syz
[  323.998024][ T5884] usb 4-1: config 0 descriptor??
[  324.009645][ T5884] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  324.023277][ T5884] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  324.061806][T16231] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  324.071256][T16231] EXT4-fs (loop4): Remounting filesystem read-only
[  324.099438][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.212078][ T5884] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  324.390744][T16245] netlink: 'syz.4.3061': attribute type 4 has an invalid length.
[  324.417476][ T5884] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  324.511181][T16252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3064'.
[  324.615974][  T792] usb 4-1: USB disconnect, device number 26
[  324.620264][  T792] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  325.688224][T16282] netlink: 'syz.4.3078': attribute type 63 has an invalid length.
[  327.089574][T16321] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3093'.
[  327.188809][T16324] loop3: detected capacity change from 0 to 512
[  327.326763][T16328] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3096'.
[  327.776742][T16346] loop3: detected capacity change from 0 to 32768
[  328.130604][T16352] loop3: detected capacity change from 0 to 32768
[  328.179073][T16352] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3107 (16352)
[  328.186834][T16352] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  328.518529][T16379] loop3: detected capacity change from 0 to 4096
[  329.821660][  T792] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  329.974432][  T792] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  329.977552][  T792] usb 4-1: config 8 has no interface number 0
[  329.979928][  T792] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  329.984147][  T792] usb 4-1: config 8 interface 177 has no altsetting 0
[  329.986787][  T792] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  329.990167][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.998966][T16423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  330.206215][  T792] usb 4-1: string descriptor 0 read error: -71
[  330.211471][    C1] ir_toy 4-1:8.177: out urb status: -71
[  330.427883][   T33] audit: type=1326 audit(1755568596.362:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16424 comm="syz.1.3142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0d8ebe9 code=0x7fc00000
[  330.724783][  T792] ir_toy 4-1:8.177: could not write reset command: -110
[  330.735979][  T792] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110
[  330.750420][  T792] usb 4-1: USB disconnect, device number 27
[  330.820822][T16448] loop3: detected capacity change from 0 to 256
[  330.878593][T16452] netlink: 'syz.3.3155': attribute type 2 has an invalid length.
[  330.988148][T16460] loop3: detected capacity change from 0 to 256
[  330.993619][T16460] MINIX-fs: mounting file system with errors, running fsck is recommended
[  331.224804][T16475] netlink: 'syz.1.3166': attribute type 32 has an invalid length.
[  331.467379][T16487] loop3: detected capacity change from 0 to 4096
[  331.619171][T16505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3180'.
[  331.629784][T16507] loop4: detected capacity change from 0 to 2048
[  331.637619][T16507] EXT4-fs: Ignoring removed mblk_io_submit option
[  331.648517][T16507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.771983][ T3623] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u9:5: bg 0: block 234: padding at end of block bitmap is not set
[  331.779684][ T3623] EXT4-fs (loop4): Remounting filesystem read-only
[  331.787747][T11750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.871767][ T5854] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  332.021605][ T5854] usb 4-1: Using ep0 maxpacket: 8
[  332.026911][ T5854] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  332.029845][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.031995][T16514] loop4: detected capacity change from 0 to 32768
[  332.033435][ T5854] usb 4-1: Product: syz
[  332.034649][T16514] XFS: noikeep mount option is deprecated.
[  332.035509][ T5854] usb 4-1: Manufacturer: syz
[  332.038838][ T5854] usb 4-1: SerialNumber: syz
[  332.041884][ T5854] usb 4-1: config 0 descriptor??
[  332.049476][ T5854] usb 4-1: selecting invalid altsetting 3
[  332.051419][ T5854] comedi comedi5: could not set alternate setting 3 in high speed
[  332.054110][ T5854] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  332.058244][ T5854] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  332.073372][T16514] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.086074][T16514] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  332.094106][T16514] XFS (loop4): Starting recovery (logdev: internal)
[  332.102400][T16514] XFS (loop4): Ending recovery (logdev: internal)
[  332.117585][T11750] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.253148][ T5854] usb 4-1: USB disconnect, device number 28
[  332.428144][T16526] loop4: detected capacity change from 0 to 32768
[  332.436019][T16526] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.447258][T16526] XFS (loop4): Ending clean mount
[  332.461059][T16526] XFS (loop4): Quotacheck needed: Please wait.
[  332.489934][T16526] XFS (loop4): Quotacheck: Done.
[  332.573354][T11750] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.867248][T16557] loop3: detected capacity change from 0 to 128
[  332.876049][T16559] loop4: detected capacity change from 0 to 8
[  332.884467][T16559] SQUASHFS error: zlib decompression failed, data probably corrupt
[  332.887467][T16559] SQUASHFS error: Failed to read block 0x9b: -5
[  332.889896][T16559] SQUASHFS error: Unable to read metadata cache entry [99]
[  332.895222][T16559] SQUASHFS error: Unable to read inode 0x127
[  332.980850][T16565] loop4: detected capacity change from 0 to 128
[  332.990223][T16565] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  332.998107][T16565] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.003251][T16567] loop3: detected capacity change from 0 to 256
[  333.015168][T16565] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.3200: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[  333.040016][T11750] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  334.798709][T16598] loop3: detected capacity change from 0 to 2048
[  334.878070][T16602] loop3: detected capacity change from 0 to 128
[  334.917226][T16604] loop3: detected capacity change from 0 to 512
[  334.920324][T16604] EXT4-fs: Ignoring removed oldalloc option
[  335.630340][T16635] loop3: detected capacity change from 0 to 512
[  335.945592][T16651] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3239'.
[  335.948478][T16651] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  336.221710][ T5884] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  336.403138][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  336.412403][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  336.416258][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  336.419565][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.424324][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.427257][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.431454][ T5884] usb 4-1: config 0 descriptor??
[  336.841681][ T5884] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max
[  336.853766][ T5884] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  337.433144][T16702] loop4: detected capacity change from 0 to 8
[  338.623319][T16722] loop3: detected capacity change from 0 to 8
[  338.831764][T16724] loop3: detected capacity change from 0 to 32768
[  338.839271][T16724] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  338.844801][T16724] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode.
[  338.859474][ T5884] usb 4-1: USB disconnect, device number 29
[  338.869833][ T7871] INFO: trying to register non-static key.
[  338.872505][ T7871] The code is fine but needs lockdep annotation, or maybe
[  338.875594][ T7871] you didn't initialize this object before use?
[  338.878797][ T7871] turning off the locking correctness validator.
[  338.881274][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  338.881293][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  338.881302][ T7871] Call Trace:
[  338.881310][ T7871]  <TASK>
[  338.881317][ T7871]  dump_stack_lvl+0x189/0x250
[  338.881338][ T7871]  ? rcu_is_watching+0x15/0xb0
[  338.881353][ T7871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.881368][ T7871]  ? __pfx__printk+0x10/0x10
[  338.881387][ T7871]  ? __is_module_percpu_address+0x39b/0x3f0
[  338.881402][ T7871]  ? is_module_address+0x17/0xf0
[  338.881425][ T7871]  assign_lock_key+0x133/0x150
[  338.881439][ T7871]  register_lock_class+0x105/0x320
[  338.881461][ T7871]  __lock_acquire+0x99/0xd20
[  338.881480][ T7871]  ? ktime_get+0x3e/0x1f0
[  338.881496][ T7871]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  338.881513][ T7871]  lock_acquire+0x120/0x360
[  338.881531][ T7871]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  338.881552][ T7871]  _raw_spin_lock_irqsave+0xa7/0xf0
[  338.881569][ T7871]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  338.881585][ T7871]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  338.881603][ T7871]  ? ktime_get+0x1cb/0x1f0
[  338.881618][ T7871]  ocfs2_mark_lockres_freeing+0x125/0x580
[  338.881635][ T7871]  ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10
[  338.881656][ T7871]  ? ocfs2_journal_shutdown+0x64b/0xaf0
[  338.881676][ T7871]  ? __pfx_ocfs2_journal_shutdown+0x10/0x10
[  338.881716][ T7871]  ? kfree+0x18e/0x440
[  338.881734][ T7871]  ocfs2_dlm_shutdown+0x3a/0x240
[  338.881751][ T7871]  ocfs2_dismount_volume+0x46a/0x8d0
[  338.881774][ T7871]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  338.881793][ T7871]  ? __pfx_evict_inodes+0x10/0x10
[  338.881816][ T7871]  ? __pfx_ocfs2_put_super+0x10/0x10
[  338.881835][ T7871]  generic_shutdown_super+0x135/0x2c0
[  338.881852][ T7871]  kill_block_super+0x44/0x90
[  338.881870][ T7871]  deactivate_locked_super+0xbc/0x130
[  338.881887][ T7871]  cleanup_mnt+0x425/0x4c0
[  338.881901][ T7871]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.881920][ T7871]  task_work_run+0x1d4/0x260
[  338.881952][ T7871]  ? __pfx_task_work_run+0x10/0x10
[  338.881966][ T7871]  ? __x64_sys_umount+0x122/0x160
[  338.881985][ T7871]  ? exit_to_user_mode_loop+0x40/0x110
[  338.882005][ T7871]  exit_to_user_mode_loop+0xec/0x110
[  338.882024][ T7871]  do_syscall_64+0x2bd/0x3b0
[  338.882042][ T7871]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.882059][ T7871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.882073][ T7871]  ? exc_page_fault+0x9f/0xf0
[  338.882088][ T7871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.882102][ T7871] RIP: 0033:0x7fac7118ff17
[  338.882116][ T7871] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  338.882128][ T7871] RSP: 002b:00007ffcc686d068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  338.882144][ T7871] RAX: 0000000000000000 RBX: 00007fac71211c05 RCX: 00007fac7118ff17
[  338.882154][ T7871] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc686d120
[  338.882163][ T7871] RBP: 00007ffcc686d120 R08: 0000000000000000 R09: 0000000000000000
[  338.882170][ T7871] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc686e1b0
[  338.882180][ T7871] R13: 00007fac71211c05 R14: 0000000000052b39 R15: 00007ffcc686e1f0
[  338.882195][ T7871]  </TASK>
[  339.000230][ T7871] ocfs2: Unmounting device (7,3) on (node local)
[  339.002767][ T7871] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  339.006444][ T7871] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  339.009432][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  339.012836][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  339.016116][ T7871] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  339.017989][ T7871] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ec e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 cc e1 83 fe 48 8b 3b 49 81 c7 88
[  339.024915][ T7871] RSP: 0018:ffffc90006787340 EFLAGS: 00010202
[  339.027072][ T7871] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881077f0000
[  339.029602][ T7871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  339.032460][ T7871] RBP: ffffc90006787a70 R08: ffff8881127105f7 R09: 1ffff110224e20be
[  339.035297][ T7871] R10: dffffc0000000000 R11: ffffed10224e20bf R12: fffff52000cf0e78
[  339.038023][ T7871] R13: ffff8881127108a0 R14: dffffc0000000000 R15: ffff888112710878
[  339.040894][ T7871] FS:  000055555cfd4500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  339.044265][ T7871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.047188][ T7871] CR2: 000055555cfef5c8 CR3: 000000003a024000 CR4: 00000000000006f0
[  339.049814][ T7871] Call Trace:
[  339.051063][ T7871]  <TASK>
[  339.052013][ T7871]  ? prb_first_seq+0xfd/0x1a0
[  339.053700][ T7871]  ? __pfx_prb_first_seq+0x10/0x10
[  339.055337][ T7871]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  339.057146][ T7871]  ? this_cpu_in_panic+0x4f/0x80
[  339.059015][ T7871]  ? _prb_read_valid+0x961/0xa90
[  339.060863][ T7871]  ? sched_balance_newidle+0x2a6/0x1030
[  339.062889][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.064597][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.066308][ T7871]  ? __switch_to+0xdae/0x1670
[  339.067935][ T7871]  ? __pfx___switch_to+0x10/0x10
[  339.069573][ T7871]  ? unwind_next_frame+0xa5/0x2390
[  339.071174][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.072776][ T7871]  ? unwind_next_frame+0xa5/0x2390
[  339.074598][ T7871]  ? unwind_next_frame+0xa5/0x2390
[  339.076416][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.078159][ T7871]  ? is_bpf_text_address+0x26/0x2b0
[  339.079893][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.081598][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.083142][ T7871]  ? lock_release+0x4b/0x3e0
[  339.084810][ T7871]  ? lock_release+0x4b/0x3e0
[  339.086390][ T7871]  ? is_bpf_text_address+0x292/0x2b0
[  339.088318][ T7871]  ? is_bpf_text_address+0x26/0x2b0
[  339.090382][ T7871]  ? do_raw_spin_lock+0x121/0x290
[  339.092412][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.094142][ T7871]  ? do_raw_spin_unlock+0x4d/0x240
[  339.095946][ T7871]  ? _raw_spin_unlock+0x28/0x50
[  339.097826][ T7871]  ? writeback_single_inode+0x43e/0x6a0
[  339.099916][ T7871]  ? write_inode_now+0x160/0x1d0
[  339.101464][ T7871]  ? __pfx_write_inode_now+0x10/0x10
[  339.103352][ T7871]  ? inode_wait_for_writeback+0xf9/0x290
[  339.105390][ T7871]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  339.107486][ T7871]  ? rcu_is_watching+0x15/0xb0
[  339.109270][ T7871]  ? do_raw_spin_unlock+0x4d/0x240
[  339.111196][ T7871]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  339.113210][ T7871]  evict+0x504/0x9c0
[  339.114612][ T7871]  ? __pfx_evict+0x10/0x10
[  339.116265][ T7871]  ? do_raw_spin_unlock+0x4d/0x240
[  339.117796][ T7871]  ? _raw_spin_unlock+0x28/0x50
[  339.119316][ T7871]  ? iput+0x6d8/0x9d0
[  339.120849][ T7871]  ocfs2_free_slot_info+0x79/0x260
[  339.122446][ T7871]  ? destroy_workqueue+0x894/0xc70
[  339.124069][ T7871]  ocfs2_delete_osb+0x58/0x170
[  339.125566][ T7871]  ocfs2_dismount_volume+0x57a/0x8d0
[  339.127414][ T7871]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  339.129567][ T7871]  ? __pfx_evict_inodes+0x10/0x10
[  339.131143][ T7871]  ? __pfx_ocfs2_put_super+0x10/0x10
[  339.133003][ T7871]  generic_shutdown_super+0x135/0x2c0
[  339.134749][ T7871]  kill_block_super+0x44/0x90
[  339.136440][ T7871]  deactivate_locked_super+0xbc/0x130
[  339.138508][ T7871]  cleanup_mnt+0x425/0x4c0
[  339.140177][ T7871]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.141849][ T7871]  task_work_run+0x1d4/0x260
[  339.143290][ T7871]  ? __pfx_task_work_run+0x10/0x10
[  339.145114][ T7871]  ? __x64_sys_umount+0x122/0x160
[  339.146816][ T7871]  ? exit_to_user_mode_loop+0x40/0x110
[  339.148887][ T7871]  exit_to_user_mode_loop+0xec/0x110
[  339.150932][ T7871]  do_syscall_64+0x2bd/0x3b0
[  339.152689][ T7871]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.154576][ T7871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.156913][ T7871]  ? exc_page_fault+0x9f/0xf0
[  339.158261][ T7871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.160565][ T7871] RIP: 0033:0x7fac7118ff17
[  339.162274][ T7871] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  339.168850][ T7871] RSP: 002b:00007ffcc686d068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  339.171882][ T7871] RAX: 0000000000000000 RBX: 00007fac71211c05 RCX: 00007fac7118ff17
[  339.175022][ T7871] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc686d120
[  339.178111][ T7871] RBP: 00007ffcc686d120 R08: 0000000000000000 R09: 0000000000000000
[  339.181201][ T7871] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc686e1b0
[  339.183947][ T7871] R13: 00007fac71211c05 R14: 0000000000052b39 R15: 00007ffcc686e1f0
[  339.186811][ T7871]  </TASK>
[  339.188010][ T7871] Modules linked in:
[  339.189763][ T7871] ---[ end trace 0000000000000000 ]---
[  339.192927][ T7871] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  339.195119][ T7871] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ec e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 cc e1 83 fe 48 8b 3b 49 81 c7 88
[  339.202548][ T7871] RSP: 0018:ffffc90006787340 EFLAGS: 00010202
[  339.204821][ T7871] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881077f0000
[  339.207693][ T7871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  339.210372][ T7871] RBP: ffffc90006787a70 R08: ffff8881127105f7 R09: 1ffff110224e20be
[  339.213282][ T7871] R10: dffffc0000000000 R11: ffffed10224e20bf R12: fffff52000cf0e78
[  339.215884][ T7871] R13: ffff8881127108a0 R14: dffffc0000000000 R15: ffff888112710878
[  339.218841][ T7871] FS:  000055555cfd4500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  339.222173][ T7871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.224910][ T7871] CR2: 000055555cfef5c8 CR3: 000000003a024000 CR4: 00000000000006f0
[  339.228139][ T7871] Kernel panic - not syncing: Fatal exception
[  339.231192][ T7871] Kernel Offset: disabled
[  339.232841][ T7871] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:48:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900067871b0
R8 =ffff888021790237 R9 =1ffff110042f2046 R10=dffffc0000000000 R11=ffffffff854f0230
R12=dffffc0000000000 R13=ffffffff99af98cb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555cfd4500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555cfef5c8 CR3=000000003a024000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fac71212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d2847073529b4100 RBX=ffffffff819683a8 RCX=d2847073529b4100 RDX=0000000000000001
RSI=ffffffff8be332e0 RDI=ffffffff819683a8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37d30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056354d2d07e8 CR3=000000010f27e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555575c87498
XMM02=706f63735f656361 7274702f616d6179 XMM03=04080004800401c7 100008004bf20065
XMM04=010010000fffffff ffffff0401000000 XMM05=0806060151be0008 0007b88008000008
XMM06=00060169e6000400 04080004800401c7 XMM07=100008004bf20065 706f63735f656361
XMM08=ffffffffffffffff e3080d8003002e01 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
